3bdf226eb2b0c6911de347b48a162e56c5e96f802e5d77ab15c9adf49ac5804a

Sharing

Copy URL Twitter E-mail

General

Target

3bdf226eb2b0c6911de347b48a162e56c5e96f802e5d77ab15c9adf49ac5804a
Size

156KB
MD5

0b3575bda1d790889c75a24a46e0fed1
SHA1

93e064694f82c96d1853a3876963865b3a1c819d
SHA256

3bdf226eb2b0c6911de347b48a162e56c5e96f802e5d77ab15c9adf49ac5804a
SHA512

8cee1ea6706063f5688e943d13c5baea320f7b4740ab63e10c146f913930b540b67eed593b69b9d28dff0c75cea1ea0da636f61c31ef186cc4f476b7a6362395
SSDEEP

3072:lj8edLdS6QwPiDjfLs7rKQOleCMbdYsF4DGObEoGIsQ5DyTw:qedLdYwPi347rKD3sF4DvVvIw

Score

N/A

Malware Config

Signatures

Files

3bdf226eb2b0c6911de347b48a162e56c5e96f802e5d77ab15c9adf49ac5804a
.dll regsvr32 windows x86

8859f19b4ff40983757df350edbe3a0a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocaleInfoA
GetThreadLocale
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
RaiseException
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
lstrlenA
lstrcmpiA
DisableThreadLibraryCalls
lstrcpynA
lstrcpyA
GetModuleFileNameA
lstrcatA
IsDBCSLeadByte
GetACP
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleHandleA
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedExchange
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSection
SetLastError
GetLastError
FreeLibrary
ExitProcess
LocalFree
GetSystemTimeAsFileTime

user32

CharNextA

advapi32

RegQueryInfoKeyA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyExA
RegCloseKey
RegEnumKeyExA

ole32

CoCreateFreeThreadedMarshaler
CoTaskMemAlloc
CoTaskMemRealloc
StringFromGUID2
CoCreateInstance
CoTaskMemFree

oleaut32

SysAllocString
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
BSTR_UserSize
BSTR_UserMarshal
BSTR_UserUnmarshal
BSTR_UserFree
VARIANT_UserSize
VARIANT_UserMarshal
VARIANT_UserUnmarshal
VARIANT_UserFree
VariantClear
SysFreeString

msvcr71

__CppXcptFilter
_adjust_fdiv
?terminate@@YAXXZ
__dllonexit
??1type_info@@UAE@XZ
??_U@YAPAXI@Z
realloc
wcsncpy
_onexit
memcpy
_resetstkoflw
free
malloc
??3@YAXPAX@Z
__CxxFrameHandler
_except_handler3
memset
_CxxThrowException
??_V@YAXPAX@Z
??2@YAPAXI@Z
memcmp
_errno
__security_error_handler
_initterm

shlwapi

PathFindExtensionA

rpcrt4

IUnknown_AddRef_Proxy
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_CountRefs
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Disconnect
CStdStubBuffer_Connect
CStdStubBuffer_AddRef
CStdStubBuffer_QueryInterface
IUnknown_Release_Proxy
CStdStubBuffer_Invoke
IUnknown_QueryInterface_Proxy
NdrOleFree
NdrOleAllocate
NdrDllGetClassObject
NdrDllCanUnloadNow
NdrCStdStubBuffer_Release
NdrDllRegisterProxy
NdrDllUnregisterProxy

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 4KB - Virtual size: 150B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8859f19b4ff40983757df350edbe3a0a

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

oleaut32

msvcr71

shlwapi

rpcrt4

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 16KB

.orpc Size: 4KB - Virtual size: 150B

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 4KB - Virtual size: 876B

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 8KB - Virtual size: 5KB

.text Size: 100KB - Virtual size: 100KB

.text
Size: 20KB - Virtual size: 16KB

.orpc
Size: 4KB - Virtual size: 150B

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 4KB - Virtual size: 876B

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 8KB - Virtual size: 5KB

.text
Size: 100KB - Virtual size: 100KB